Re: [SM-USERS] squirrelmail login failed, outlook express works, telnet to 143 works

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

On 5/29/07, Paul DeHerrera <pau...@gm...> wrote:
> details:
>
> debian: Linux www 2.6.18-4-686 #1 SMP Mon Mar 26 17:17:36 UTC 2007 i686
> GNU/Linux
>
> www:/etc/courier# dpkg -l | grep apache2
> ii  apache2-doc                       2.2.3-4
>           documentation for apache2
> ii  apache2-mpm-prefork               2.2.3-4
>           Traditional model for Apache HTTPD 2.1
> ii  apache2-utils                     2.2.3-4
>           utility programs for webservers
>  ii  apache2.2-common                  2.2.3-4                         Next
> generation, scalable, extendable web se
> ii  libapache2-mod-perl2              2.0.2-2.4
>           Integration of perl with the Apache2 web ser
> ii  libapache2-mod-php4               4.4.4-8+etch3
>           server-side, HTML-embedded scripting languag
> ii  libapache2-mod-python             3.2.10-4
>           Apache 2 module that embeds Python within th
>
> I have installed squirrelmail with 'apt-get' and manually download with the
> same results
>
> current config:
>
> SquirrelMail configtest
> This script will try to check some aspects of your SquirrelMail
> configuration and point you to errors whereever it can find them. You need
> to go run conf.pl in the config/ directory first before you run this script.
>
> SquirrelMail version: 1.4.10a
> Config file version: 1.4.0
> Config file last modified: 29 May 2007 16:55:30
>
> Checking PHP configuration...
>     PHP version 4.4.4-8+etch3 OK.
>     PHP extensions OK.
> Checking paths...
>     Data dir OK.
>     Attachment dir OK.
>     Plugins are not enabled in config.
>     Themes OK.
>     Default language OK.
>      Base URL detected as: https://www.bogomips.biz (location base
> autodetected)
> Checking outgoing mail service....
>     SMTP server OK (220 www.bogomips.biz ESMTP Postfix (Debian/GNU))
> Checking IMAP service....
>     IMAP server ready (* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE
> THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION]
> Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING
> for distribution information.)
>     Capabilities: * CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE
> THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION
> Checking internationalization (i18n) settings...
>      gettext - Gettext functions are available. You must have appropriate
> system locales compiled.
>      mbstring - Mbstring functions are available.
>      recode - Recode functions are unavailable.
>      iconv - Iconv functions are available.
>      timezone - Webmail users can change their time zone settings.
> Checking database functions...
>     not using database functionality.
>
> Congratulations, your SquirrelMail setup looks fine to me!
>
> mail log dump during login attempts
>
> outlook express
>
> May 29 15:39:33 www authdaemond: Authenticated: sysusername=myuserid,
> sysuserid=<null>, sysgroupid=501, homedir=/home/myuserid, address=myuserid,
> fullname=myuserid,,,, maildir=<null>, quota=<null>, options=<null>
> May 29 15:39:33 www authdaemond: Authenticated: clearpasswd=mypassword,
> passwd=replaced_to_protect_the_innocent
> May 29 15:39:33 www imapd: LOGIN, user=myuserid, ip=[::ffff:192.168.127.22
> ], protocol=IMAP
> May 29 15:39:33 www imapd: LOGOUT, user=myuserid,
> ip=[::ffff:192.168.127.22], headers=0, body=0, rcvd=210, sent=483, time=0
> May 29 15:39:33 www authdaemond: Authenticated: sysusername=myuserid,
> sysuserid=<null>, sysgroupid=501, homedir=/home/myuserid, address=myuserid,
> fullname=myuserid,,,, maildir=<null>, quota=<null>, options=<null>
> May 29 15:39:33 www authdaemond: Authenticated: clearpasswd=mypassword,
> passwd=replaced_to_protect_the_innocent
> May 29 15:39:33 www imapd: LOGIN, user=myuserid, ip=[::ffff:192.168.127.22
> ], protocol=IMAP
> May 29 15:39:33 www imapd: DISCONNECTED, user=myuserid,
> ip=[::ffff:192.168.127.22], headers=0, body=0, rcvd=261, sent=559, time=0
>
> telnet from remote host to port 143
>
> May 29 15:43:13 www authdaemond: Authenticated: sysusername=myuserid,
> sysuserid=<null>, sysgroupid=501, homedir=/home/myuserid, address=myuserid,
> fullname=myuserid,,,, maildir=<null>, quota=<null>, options=<null>
> May 29 15:43:13 www authdaemond: Authenticated: clearpasswd=mypassword,
> passwd=replaced_to_protect_the_innocent
> May 29 15:43:13 www imapd: LOGIN, user=myuserid, ip=[::ffff:10.6.6.22],
> protocol=IMAP
> May 29 15:43:18 www imapd: LOGOUT, user=myuserid, ip=[::ffff:10.6.6.22],
> headers=0, body=0, rcvd=10, sent=80, time=5
>
> squirrelmail
>
> May 29 15:40:11 www authdaemond: Authenticated: sysusername=myuserid,
> sysuserid=<null>, sysgroupid=501, homedir=/home/myuserid, address=myuserid,
> fullname=myuserid,,,, maildir=<null>, quota=<null>, options=<null>
> May 29 15:40:11 www authdaemond: Authenticated: clearpasswd=mypassword,
> passwd=replaced_to_protect_the_innocent
> May 29 15:40:11 www imapd: LOGIN, user=myuserid, ip=[::ffff:127.0.0.1],
> protocol=IMAP
> May 29 15:40:11 www imapd: LOGOUT, user=myuserid, ip=[::ffff:127.0.0.1],
> headers=0, body=0, rcvd=30, sent=238, time=0
> May 29 15:40:12 www imapd: LOGIN FAILED, user=myuserid, ip=[::ffff:
> 127.0.0.1]
> May 29 15:40:17 www imapd: LOGIN FAILED, user=myuserid,
> ip=[::ffff:127.0.0.1]
> May 29 15:40:22 www imapd: LOGOUT, ip=[::ffff: 127.0.0.1], rcvd=36, sent=323

Looks like SM may have lost user password info on the 2nd login?  Have
you checked your PHP session settings?  You could simply dump the
values for $username and $onetimepad in src/webmail.php to make sure
they are still populated.  Also make sure your "key" cookie survives
to webmail.php as well